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1 DETAILED ACTION 

2 

3 This action is in response to the communication filed on 3/20/2007. 

4 . Claims 51 - 65 are pending. 
5 

6 Continued Examination Under 37 CFR 1.114 

7 

8 A request for continued examination under 37 CFR 1.114, including the fee set 

9 forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 

1 0 application is eligible for continued examination under 37 CFR 1 . 1 1 4, and the fee set 

1 1 forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 

12 has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 

13 3/20/2007 has been entered. 
14 

15 All objections and rejections not set forth below have been withdrawn. As the 

16 applicant has requested that further search and consideration be performed, the 

1 7 examiner applies the following rejections. 
18 

19 

20 Claim Rejections - 35 USC § 101 

21 

22 35 U.S. C. 101 reads as follows: 
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1 Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 

2 matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 

3 conditions and requirements of this title. 
4 

5 Claims 61 - 65 are rejected under 35 U.S.C. 101 because the claimed 



6 invention is directed to non-statutory subject matter. Specifically, these claims 

7 recite instructions embodied within a signal. As a signal encoded with descriptive 

8 material fails to falls within one of the four statutory categories of invention, these claims 

9 are rejected as nonstatutory. 
10 

11 



1 2 Claim Rejections - 35 USC § 102 

13 The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
14- form the basis for the rejections under this section made in this Office action: 

15' A person shall be entitled to a patent unless - 

1 6 (e) the invention was described in (1) an application for patent, published under section 122(b), by 

1 7 another filed in the United States before the invention by the applicant for patent or (2) a patent 

1 8 granted on an application for patent by another filed in the United States before the invention by the 

1 9 applicant for patent, except that an international application filed under the treaty defined in section 

20 351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 

21 . only if the international application designated the United States and was published under Article 21 (2) 

22 of such treaty in the English language. 
23 

24 Claims 51, 52, 54, 56, 57, 59, 61, and 64 are rejected under 35 U.S.C. 102(e) 

25 as being anticipated by Heinrich et al. (Heinrich), U.S. Patent 6,199,167. 

26 

27 Regarding claim 51 , Heinrich discloses: 

28 receiving a request for an authentication, at a microcontroller included in a bridge 

29 from a bus external to the bridge; requesting security data from a security device; 
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1 receiving the security data from the security device, at the microcontroller (2: 1 -45; 3:51 - 

2 59; fig. 1:110-120). 

3 evaluating the security data; and approving the authentication at the 

4 microcontroller responsive to the security data being evaluated as acceptable (3:51 -59; 

5 fig. 1:110-120; 3:65-4:2). 
6 

7 Regarding claim 52, Heinrich discloses: 

8 disapproving the authentication at the microcontroller responsive to the security 

9 data being evaluated as unacceptable (3:65-4:2). 
10 

1 1 Regarding claim 54, the combination of Heinrich discloses: 

1 2 wherein requesting security data from a security device comprises requesting the 



1 3 security data from the security device over a direct connection between the security 

1 4 device and the microcontroller; and wherein receiving the security data from the security 

1 5 device, at the microcontroller, comprises receiving the security data from the security 

1 6 device over the direct connection to the microcontroller (fig. 3:204, 203). 
17 

18 Regarding claims 56, 57, 59, 61, and 64, they are the method steps and method 

19 implemented on computer readable medium claims corresponding to the method claims 

20 above, and are rejected, at least, for the same reasons. 
21 

22 
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1 Claim Rejections - 35 USC § 103 

2 

3 The following is a quotation of 35 U.S.C: 1 03(a) which forms the basis for all 

4 obviousness rejections set forth in this Office action: 

5 (a) A patent may not be obtained though the invention is not identically disclosed or described as set 

6 forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 

7 the prior art are such that the subject matter as a whole would have been obvious at the time the 

8 invention was made to a person having ordinary skill in the art to which said subject matter pertains. 

9 Patentability shall not be negatived by the manner in which the invention was made. 
10 

11 

12 Claims 53, 55, 58, 60, 63, and 65 are rejected under 35 U.S.C. 103(a) as 

1 3 being unpatentable over Heinrich. 

14 

15 Regarding claims 55, 60, and 65, Heinrich discloses the submission of 

16 authentication data by the user and that the user input may comprise biometric data (fig. 

17 1:120; 2:16-37). While Heinrich discloses evaluating user input for authentication, 

1 8 Heinrich does not contain an explicit statement that when the user input comprises 

1 9 biometric information, the biometric information is evaluated. However, it would have 

20 been obvious to one of ordinary skill in the art to recognize the need to evaluate the 

21 biometric information when the user desiring authentication submits biometric 

22 information. This would have been obvious as one of ordinary skill in the art would have 

23 been motivated by the ability to reason logically that whenever biometric information is 

24 submitted by a user desiring authentication, then this type of information should be 

25 evaluated. 
26 
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1 Regarding claims 53, 58, and 63, Heinrich does not explicitly state wherein 

2 evaluating the security data comprises requesting an indication of acceptability inside 

3 SMM. However, Heinrich discloses that for purposes of security, systems operate 

4 within SMM (1 :35-42; 4:3-28). Heinrich clearly enables for SMM to be apart of system 

5 operation and for his method of verification as an enhancement to existing security 

6 features. 
7 

8 Claims 51, 52, 54 - 57, 59 - 62, 64, and 65 are rejected under 35 

9 U.S.C. 102(e) as being anticipated by Flyntz, "Multi-Level Secure Computer With 

1 0 Token-Based Access Control", U.S. Patent 6,389,542 in view of Angelo, "Method 

1 1 and Apparatus for Allowing Access to Secured computer Resources by Utilizing a 

12 Password and an External Encryption Algorithm", U.S. Patent 5,949,882. 
13 

14 Regarding claim 51, Flyntz discloses: 

1 5 receiving a request for an authentication, at a microcontroller, requesting 

1 6 security data from a security device; receiving the security data from the security device, 

17 at the microcontroller (Flyntz, col. 2, lines 52-56; col. 15, lines 5-20, 33-36, 53-55). 

18 Flyntz discloses that a user requests authentication by supplying security data to the 

19 microcontroller, which in turn processes such security data to evaluate acceptance. 

20 evaluating the security data; and approving the authentication at the 

21 microcontroller responsive to the security data being evaluated as acceptable (Flyntz, 

22 col. 10, lines 33-40; col. 15, lines 21-65). 
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1 Flyntz discloses a microcontroller, serving to control the connection of the CPU to 

2 devices located on system buses (Flyntz, fig. 2; col. 5, line 61 - col. 6, line 25; col. 15, 

3 lines 21 -32). The system of Flyntz allows for the provision of power to secure system 

4 portions after a positive indication of acceptability has been received (Flyntz, Abstract; 

5 col. 1 , lines 55-63). The microcontroller receives a request for authentication via 

6 connection to a security device (Flyntz, fig. 2:31 ). Flyntz, however, does not disclose 

7 the microcontroller as included in a bridge. 

8 Like Flyntz, Angelo discloses controlling circuitry to implement a secure power up 

9 procedure for providing power to system portions on system buses, upon permission for 
TO authorized users (Angelo, Abstract; col. 6, lines 44-50; col. 11, lines 17-45). Angelo 

1 1 specifically discloses that the controlling circuitry used to accomplish this procedure is 

12 included in the bridge, thus allowing the system to control the connection of the CPU to 

13 devices located on system buses (Angelo, fig. 1-130; col. 5, lines 1-30). The inclusion 

1 4 of the above mentioned security features within the bridge allows for increased 

1 5 hardware security, as security data may be entered via a secure communication path to 

16 the bridge after a request for authentication has been received (Angelo, 2:39-43; 1 1 :64- 

17 12:9). 

1 8 It would have been obvious to one of ordinary skill in the art to employ the secure 

1 9 bridge implementation of Angelo for connecting devices on system buses along with the 

20 security microcontroller of Flyntz for connecting devices on system buses. This would 

21 have been obvious because one of ordinary skill in the art would have been motivated 

22 by the showing of prior art that the above mentioned security features need not be 
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1 constructed as separate system components, but rather, may be feasibly included 

2 within the existing computer system's bridge, thereby allowing the secure connection of 

3 the CPU to devices located on buses (Angelo, fig. 2-130; col. 2, lines 39-43; 5:13-26; 

4 10:33-54), as well as increased hardware security. 



5 The combination of Flyntz and Angelo discloses the request being received from 

6 a bus external to the bridge (Flyntz, fig. 2, elem. 31 ; Angelo, fig. 1 :1 30). 
7 

8 Regarding claim 52, the combination of Flyntz and Angelo discloses: 

9 disapproving the authentication at the microcontroller responsive to the security 

10 data being evaluated as unacceptable (Flyntz, col. 2, lines 53-57; col. 10, lines 33-37; 

11 15:21-65). 
12 

1 3 Regarding claim 53, the combination of Flyntz and Angelo discloses wherein 

1 4 evaluating the security data comprises requesting an indication of acceptability inside 

15 SMM (Angelo, Abstract; col. 6, lines 44-50; col. 5: 21-30; col. 11, lines 17-45). 
16 

1 7 Regarding claim 54, the combination of Flyntz and Angelo discloses: 

1 8 wherein requesting security data from a security device comprises requesting the 

1 9 security data from the security device over a direct connection between the security 

20 cfew'ce and the microcontroller; and wherein receiving the security data from the security 

21 device, at the microcontroller, comprises receiving the security data from the security 

22 device over the direct connection to the microcontroller (Flyntz, fig. 2, elem. 31 , 32). 
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1 The combination of Flyntz and Angelo discloses a direct connection between the 

2 security device and the microcontroller. 
3 

4 Regarding claim 55, the combination of Flyntz and Angelo discloses: 

5 wherein requesting security data from a security device comprises requesting 

6 biometric data from a biometric device; wherein receiving the security data from the 

7 security device, at the microcontroller, comprises receiving the biometric data from the 

8 biometric device, at the microcontroller (Flyntz, col. 2, lines 52-56; col. 15, lines 5-20, 

9 33-36, 53-55; col. 6, lines 36-46). 

1 0 wherein evaluating the security data comprises evaluating the biometric data; 

1 1 and wherein approving the authentication responsive to the security data being 

1 2 evaluated as acceptable comprises approving the authentication responsive to the 

1 3 biometric data being evaluated as acceptable (Flyntz, col. 2, lines 52-56; col. 1 5, lines 

14 5-20, 33-36, 53-55; col. 6, lines 36-46; col. 10, lines 33-40). 
15 

16 Regarding claims 56 - 65, they are the method steps and method implemented 

17 on computer readable medium claims corresponding to the method claims above, and 

18 are rejected, at least, for the same reasons. 
19 

20 
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1 Response to Arguments 

2 

3 Applicant's arguments filed 8/1 5/07 have been fully considered but they are not 

4 persuasive. 
5 

6 Applicant argues primarily that: 

7 

8 (i) ... Flyntz does not describe or suggest receiving a request for an authentication 

9 at a microcontroller included in a bridge, as set forth in independent claims 51, 56, and 

10 61. (Remarks, pg. 8) 

11 In response to applicant's arguments against the references individually, one 

1 2 cannot show nonobviousness by attacking references individually where the rejections 

1 3 are based on combinations of references. See In re Keller, 642 F.2d 41 3, 208 

1 4 USPQ 871 (CCPA 1 981 ); In re Merck & Co., 800 F.2d 1 091 , 231 USPQ 375 (Fed. Cir. 

15 1986). 
16 

17 ( i i ) Flyntz also fails to describe or suggest that the request is received from a bus 

18 external to the bridge . . . (Remarks, pa. 8) 
19 

20 In response to applicant's arguments against the references individually, one 

21 cannot show nonobviousness by attacking references individually where the rejections 

22 are based on combinations of references. See In re Keller, 642 F.2d 41 3, 208 
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1 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 USPQ 375 (Fed. Cir. 

2 1986). 
3 

4 (iii) Flyntz also fails to describe or suggest that . . .and that the authentication is 

5 approved at the microcontroller. (Remarks, pg. 8) 
6 

7 In response, the examiner respectfully notes that the applicant mischaracterizes 

8 the prior art, and encourages the applicant to review the reference of Flyntz as well as 

9 the above rejections, wherein it is shown that authentication is approved at the 
1 0 microcontroller. 

11 

1 2 (iv) There is no suggestion in Angelo that the bridge 130 is anything but a 

1 3 conventional bridge that merely converts signals formatted in accordance with the PCI 

1 4 protocol to other supported protocols (ISA, ISE, etc.). Such conventional bridges do not 

1 5 include microcontrollers. In fact, the entirety of the security functionality mentioned in 

1 6 Angelo is performed by the microprocessor 102 ... (Remarks, pg. 8) 
17 

1 8 In response, the examiner respectfully notes that the applicant mischaracterizes 

1 9 the prior art, and encourages the applicant to review the cited prior art as well as the 

20 above rejections (particularly, it would be helpful to note the portions cited by the 

21 examiner). Therein it is seen that the applicant's assertion, essentially that the bridge in 

22 prior art is nothing more than "a conventional bridge", is without merit. Furthermore, the 
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1 examiner points out that if the applicant would find additional evidentiary teachings to be 

2 helpful in understanding the disclosure of Angelo (for ex. regarding bridge 130), the 

3 applicant may consider Angelo's own teachings (explicitly incorporated by reference - 

4 Angelo, col. 4, lines 34-38) within U.S. Patent 5,748,888 (figs. 1 and 4: bridge 130). 
5 

6 (v) The examiner points out that the applicant repeats similar arguments based upon 

7 the arguments pointed out above (Remarks, pg. 9, 10). These arguments are noted to 

8 be unpersuasive for the same reasons. 
9 

1 0 Conclusion 

11 

12 Claims 51 - 65 are rejected. 
13 

14 The prior art made of record and not relied upon is considered pertinent to 

15 applicant's disclosure: 
16 

1 7 See Notice of References Cited. 

18 

19 , A shortened statutory period for reply is set to expire 3 months (not less than 90 

20 days) from the mailing date of this communication. 
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1 Any inquiry concerning this communication or earlier communications from the 

2 examiner should be directed to Jeffery Williams whose telephone number is (571 ) 272- 

3 7965. The examiner can normally be reached on 8:30-5:00. 

4 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

5 supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 

6 number for the organization where this application or proceeding is assigned is (703) 

7 872-9306. 

8 Information regarding the status of an application may be obtained from the 

9 Patent Application Information Retrieval (PAIR) system. Status information for 

10 published applications may be obtained from either Private PAIR or Public PAIR. 

1 1 Status information for unpublished applications is available through Private PAIR only. 

12 For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

13 you have questions on access to the Private PAIR system, contact the Electronic 

1 4 Business Center (EBC) at 866-21 7-91 97 (toll-free). 
15 

16 

17 J. Williams 

18 AU2137 ^ 
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